In the Linux kernel, the following vulnerability has been resolved:
macvlan: fix macvlan_get_size() not reserving space for IFLA_MACVLAN_BC_CUTOFF
macvlan_get_size() does not account for IFLA_MACVLAN_BC_CUTOFF, but macvlan_fill_info() conditionally includes it when port->bc_cutoff != 1. This causes nla_put_s32() to fail with -EMSGSIZE when the netlink skb runs out of space, triggering a WARN_ON in rtnetlink and preventing the interface from being dumped.
The bug can be reproduced with:
ip link add macvlan0 link eth0 type macvlan mode bridge ip link set macvlan0 type macvlan bc_cutoff 0 ip -d link show macvlan0 # fails with -EMSGSIZE
The bc_cutoff feature was added in commit 954d1fa1ac93 ("macvlan: Add netlink attribute for broadcast cutoff"), which added the nla_put_s32() call in macvlan_fill_info() but missed adding the corresponding nla_total_size(4) in macvlan_get_size(). A follow-up commit 55cef78c244d ("macvlan: add forgotten nla_policy for IFLA_MACVLAN_BC_CUTOFF") fixed the missing nla_policy entry but still did not fix the size calculation.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel6.18-debuginfo-common-x86_64Upgrade kernel6.18-tools-develUpgrade kernel-livepatch-6.18.33-63.124Upgrade bpftool6.18-debuginfoUpgrade kernel6.18-debuginfo-common-aarch64Upgrade kernel6.18-develUpgrade kernel6.18-debuginfoUpgrade bpftool6.18Upgrade perf6.18Upgrade kernel6.18-headersUpgrade kernel6.18-modules-extraUpgrade python3-perf6.18-debuginfoUpgrade perf6.18-debuginfoUpgrade python3-perf6.18Upgrade kernel6.18-toolsUpgrade kernel6.18-modules-extra-commonUpgrade kernel6.18-tools-debuginfoUpgrade kernel6.18 | Jul 8, 2026 | Jun 24, 2026 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Jun 24, 2026 |
| Ubuntu | — | Upgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-6.8.0-1030-nvidia-tegra-rtUpgrade linux-image-6.8.0-1064-gcp-64kUpgrade linux-image-realtime-64kUpgrade linux-image-6.8.1-1056-realtimeUpgrade linux-image-generic-64k-7.0Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-azure-fde-6.8Upgrade linux-image-nvidiaUpgrade linux-image-nvidia-6.8Upgrade linux-image-laptop-23.10Upgrade linux-image-raspi-6.8Upgrade linux-image-generic-64kUpgrade linux-image-gke-7.0Upgrade linux-image-7.0.0-1016-nvidiaUpgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-gke-64k-hwe-26.04Upgrade linux-image-7.0.0-28-realtime-64kUpgrade linux-image-gke-64k-7.0Upgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-1061-aws-64kUpgrade linux-image-6.8.0-1061-ibmUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-136-fipsUpgrade linux-image-realtime-7.0Upgrade linux-image-virtual-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-7.0.0-1015-raspiUpgrade linux-image-aws-lts-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-genericUpgrade linux-image-gkeopUpgrade linux-image-7.0.0-1014-azureUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-64k-hwe-26.04Upgrade linux-image-oem-26.04aUpgrade linux-image-raspi-7.0Upgrade linux-image-fipsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-7.0.0-1008-gcp-64kUpgrade linux-image-oem-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-realtimeUpgrade linux-image-6.8.0-1059-nvidiaUpgrade linux-image-6.8.0-1062-azure-fdeUpgrade linux-image-generic-7.0Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-aws-fipsUpgrade linux-image-lowlatency-6.8Upgrade linux-image-gkeUpgrade linux-image-gke-64k-6.8Upgrade linux-image-6.8.0-1063-azure-fipsUpgrade linux-image-oem-20.04Upgrade linux-image-7.0.0-28-realtimeUpgrade linux-image-azure-6.8Upgrade linux-image-7.0.0-2016-nvidia-bos-64kUpgrade linux-image-gcp-64k-7.0Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-nvidia-tegraUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-bosUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-raspi-realtime-7.0Upgrade linux-image-7.0.0-1009-aws-64kUpgrade linux-image-6.8.0-2050-raspi-realtimeUpgrade linux-image-7.0.0-1010-ibmUpgrade linux-image-7.0.0-1003-gke-64kUpgrade linux-image-aws-7.0Upgrade linux-image-7.0.0-1010-azureUpgrade linux-image-aws-64k-7.0Upgrade linux-image-realtime-64k-7.0Upgrade linux-image-realtime-hwe-26.04Upgrade linux-image-6.8.0-1064-gcpUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-136-generic-64kUpgrade linux-image-nvidia-bos-64kUpgrade linux-image-nvidia-bos-7.0Upgrade linux-image-oracleUpgrade linux-image-6.8.0-136-lowlatency-64kUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-generic-hwe-26.04Upgrade linux-image-xilinx-6.8Upgrade linux-image-gke-hwe-26.04Upgrade linux-image-nvidia-hwe-26.04Upgrade linux-image-intel-iotgUpgrade linux-image-aws-64kUpgrade linux-image-virtual-7.0Upgrade linux-image-realtime-6.8.1Upgrade linux-image-7.0.0-28-generic-64kUpgrade linux-image-7.0.0-1008-gcpUpgrade linux-image-oem-22.04bUpgrade linux-image-ibm-6.8Upgrade linux-image-gke-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-gcp-fipsUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-oem-24.04bUpgrade linux-image-lowlatencyUpgrade linux-image-7.0.0-1015-raspi-realtimeUpgrade linux-image-6.8.0-1059-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1030-nvidia-tegraUpgrade linux-image-xilinxUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-26.04Upgrade linux-image-azure-fdeUpgrade linux-image-awsUpgrade linux-image-7.0.0-1011-gcpUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oem-24.04aUpgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-gke-6.8Upgrade linux-image-6.8.0-1033-xilinxUpgrade linux-image-oem-7.0Upgrade linux-image-ibm-7.0Upgrade linux-image-7.0.0-28-genericUpgrade linux-image-7.0.0-1009-azure-fdeUpgrade linux-image-6.8.0-1059-nvidia-64kUpgrade linux-image-6.8.0-1058-oracleUpgrade linux-image-azure-fips-6.8Upgrade linux-image-nvidia-7.0Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-virtual-hwe-26.04Upgrade linux-image-gcpUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-gcp-7.0Upgrade linux-image-7.0.0-1016-nvidia-64kUpgrade linux-image-6.8.0-1064-gcp-fipsUpgrade linux-image-6.8.0-1063-azureUpgrade linux-image-6.8.0-1061-aws-fipsUpgrade linux-image-raspiUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-20.04dUpgrade linux-image-kvmUpgrade linux-image-gkeop-6.8Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-fips-6.8Upgrade linux-image-azure-fde-7.0Upgrade linux-image-6.8.0-1061-raspiUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-24.04cUpgrade linux-image-generic-6.8Upgrade linux-image-7.0.0-1008-oracleUpgrade linux-image-6.8.0-136-genericUpgrade linux-image-7.0.0-2016-nvidia-bosUpgrade linux-image-6.8.0-1059-nvidia-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-ibmUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-aws-fips-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-7.0.0-1011-gcp-64kUpgrade linux-image-6.8.0-1058-oracle-64kUpgrade linux-image-6.8.0-1046-gkeopUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1059-gkeUpgrade linux-image-nvidia-bos-64k-7.0Upgrade linux-image-oem-20.04cUpgrade linux-image-nvidia-64k-7.0Upgrade linux-image-azure-7.0Upgrade linux-image-azureUpgrade linux-image-7.0.0-1008-oracle-64kUpgrade linux-image-7.0.0-1003-gkeUpgrade linux-image-6.8.0-136-lowlatencyUpgrade linux-image-6.8.0-1059-gke-64kUpgrade linux-image-virtualUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1061-awsUpgrade linux-image-oracle-64k-7.0Upgrade linux-image-oem-24.04dUpgrade linux-image-oem-20.04bUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-7.0.0-1009-oemUpgrade linux-image-7.0.0-1009-awsUpgrade linux-image-oracle-7.0 | Jul 20, 2026 | Jun 24, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub